CVE-2026-18017 is a use-after-free vulnerability in the Dawn component of Google Chrome before version 151.0.7922.72. Exploitation requires a crafted HTML page to trigger arbitrary code execution inside the sandbox environment. The vulnerability is identified as CWE-416 (Use After Free). The Chromium security team rates this issue as low severity. There is no CVSS score or detailed vendor advisory available in the provided data. No known exploits have been observed in the wild. The affected versions are implied to be all versions prior to 151.0.7922.72, but this is not explicitly stated in the input.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandboxed environment of Google Chrome. This could potentially lead to limited code execution capabilities constrained by sandbox restrictions. The Chromium team classifies the severity as low, indicating limited impact or difficulty in exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official remediation information are provided, users should monitor official Google Chrome security advisories for updates and apply updates once available. No specific mitigations are indicated in the current data.